Re^2: Form authentication for .NET sites

[Charli]

Hi Thomas, thank you so much for your answers.

Yes, I can confirm that the site uses JavaScript. The login site is not ours, but we must go through that for us to be able to go through our site. Below is a code snippet of the HTML form.

<div id="loginArea">        
        <div id="loginMessage" class="groupMargin">Sign in with your a
+ccount</div>
        <form method="post" id="Login" autocomplete="off" novalidate="
+novalidate" onkeypress="if (event &amp;&amp; event.keyCode
== 13) Login.submitLoginRequest();" action="">
            <div id="formsAuthenticationArea">
                <div id="userNameArea">
                    <input id="userNameInput" name="UserName" type="em
+ail" value="" tabindex="1" class="text fullWidth" spellcheck="false" 
+placeholder="Username" autocomplete="off">     
                </div>
                <div id="passwordArea">
                     <input id="passwordInput" name="Password" type="p
+assword" tabindex="2" class="text fullWidth" placeholder="Password" a
+utocomplete="off">                            

                </div>
                <div id="kmsiArea" style="display:none">
                    <input type="checkbox" name="Kmsi" id="kmsiInput" 
+value="true" tabindex="3">
                    <label for="kmsiInput">Keep me signed in</label>
                </div>
                <div id="submissionArea" class="submitMargin">
                    <span id="submitButton" class="submit" tabindex="4
+" onkeypress="if (event &amp;&amp; event.keyCode == 32) Login.submitL
+oginRequest();" onclick="return Login.submitLoginRequest();">Sign in<
+/span>
                </div>
            </div>
        </form>
    </div>

Any suggestions or advice on how to go about the form?

Thanks, Charli

[thomas895]

There could be other JavaScript doing things with the form that isn't visible in your snippet. Again, try to use the development tools (try Ctrl-Shift-K, Ctrl-Shift-I, or right-click and select "Inspect Element") to see what else is sent to the server.
You should be able to figure it out pretty easily, otherwise the manuals are never far away.